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IN THE CLAIMS: 

Amended claims follow: 

1 . (Currently Amended) A method for analyzing a network utilizing a zone 
controller, comprising: 

[[(a)]] receiving network traffic information from a plurality of host controllers; 
[[(b)]] reporting on the network traffic information utilizing a plurality of network-based 
interfaces; 

(e) wher e in th e host controll e rs ar e r e lat e d to a zon e ; 

[[(d)]] generating a map of a network based on the network traffic information; and 
[[(c)]] providing intrusion detection services based on the network traffic information; 
wherein the host controllers are related to a zone , 

2. (Original) The method as recited in claim 1 , and further comprising synchronizing 
a clock with the host controllers, 

3 . (Original) The method as recited in claim 1 , wherein the network traffic 
information is originally collected by a plurality of agents coupled to the host 
controllers. 

4. (Original) The method as recited in claim 1, and further comprising identifying a 
zone associated with each of the host controllers* 

5 . (Ori ginal) The method as recited ijx claim 4, and further comprising reporting on 
the network traffic information relating to each of the zones. 

6. (Previously Presented) The method as recited in claim 1, and further comprising 
receiving a plurality of the maps from the host controllers. 
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7. (Original) The method as recited in claim 6, and farther comprising reporting on 
the network traffic information utilizing the maps. 

8. (Original) The method as recited in claim 1 3 and further comprising offloading the 
network traffic information to a database, 

9. (Currently Amended) A computer program product for analyzing a network 
utilizing a zone controller, comprising: 

[[(a)]] computer code for receiving network traffic information from a plurality of host 
controllers; 

[[(b)]] computer code for reporting on the network traffic information utilizing a 

plurality of network-based interfaces; 
(e) wh e r e in th e host controllers oro related to a Bono; 

[[(d)]] computer code for g enerating a map of a network based on the network traffic 
information; and 

[[(e)]] computer code for p roviding intrusion detection services based on the network 
traffic information^ 

wherein the host controllers are related to a zone . 

10. (Original) The computer program product as recited in claim 9 ? and fiirther 
comprising computer code for synchronizing a clock with the host controllers, 

1 1 . (Original) The computer program product as recited in claim 9, wherein the 
network traffic information is originally collected by a plurality of agents coupled 
to the host controllers. 

12. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for identifying a zone associated with each of the host 
controllers. 
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13. (Original) The computer program product as recited in claim 12, and further 
comprising computer code for reporting on the network traffic information 
relating to each of the zones. 

14. (Previously Presented) The computer program product as recited in claim 9, and 
further comprising computer code for receiving a plurality of the maps from the 
host controllers. 

1 5. (Original) The computer program product as recited in claim 14, and further 
comprising computer code for reporting on the network traffic information 
utilizing the maps. 

16. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for offloading the network traffic information to a 
database. 

1 7. (Currently Amended) A system for analyzing a network utilizing a zone 
controller, comprising: 

[[(a)]] logic for receiving network traffic information from a plurality of host controllers; 
[[(b)]] logic for reporting on the network traffic information utilizing a plurality of 

network-based interfaces; 
(e) whoroin tha host controllers aro - rolatod to a zono; 

[[(d)]] logic for g enerating a map of a network based on the network traffic information; 
and 

[[(e)]] logic for p roviding intrusion detection services based on the network traffic 
information; 

wherein the host controllers are related to a zone . 

18. (Original) The system as recited in claim 17, and further comprising logic for 
synchronizing a clock with the host controllers. 
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19. (Original) The system as recited in claim 1 7, wherein the network traffic 
information is originally collected by a plurality of agents coupled to the host 
controllers. 

20. (Original) The system as recited in claim 17, and further comprising logic for 
identifying a zone associated with each of the host controllers. 

21 . (Original) The system as recited in claim 20, and further comprising logic for 
reporting on the network traffic information relating to each of the zones. 

22. (Previously Presented) The system as recited in claim 17, and further comprising 
logic for receiving a plurality of the maps from the host controllers. 

23. (Original) The system as recited in claim 22, and further comprising logic for 
reporting on the network traffic information utilizing the maps. 

24. (Original) The system as recited in claim 17, and further comprising logic for 
offloading the network traffic information to a database, 

25. (Currently Amended) A system for analyzing a network utilizing a zone 
controllfet, comprising: 

[[(a)]] means for receiving network traffic information from a plurality of host 
controllers; 

[[(b) J] means for reporting on the network traffic infonnation utilizing a plurality of 

network-based interfaces; 

(e) wherein tho host controll e rs are related to a zono; 

[[(d)]] means for g enerating a map of a network based on the network traffic 

information; and 

[[(e)]] means for p roviding intrusion detection services based on the network traffic 
infonnation; 

wherein the host controllers are related to a zone . 
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26 . (Previously Presented) A method for analyzing a network utilizing a zone 
controller, comprising: 

(a) synchronizing a clock with a plurality of host controllers; 

(b) receiving network traffic information from the host controllers; 

(c) identifying a zone associated with each of the host controllers; 

(d) receiving maps from the host controllers; 

(e) reporting on the network traffic information relating to each of the zones utilizing 
a plurality of network-based interfaces and the maps; 

(f) offloading the network traffic information to a database; 

(g) generating a map of a network based on the network traffic information; and 

(h) providing intrusion detection services based on the network traffic information. 

27. (Previously Presented) The method as recited in claim 1 , wherein the map 
includes a correlation among computers of the network and the network traffic 
information associated therewith. 

28. (Previously Presented) The method as recited in claim 5, wherein a report is 
generated including a plurality of objects in a tree representation. 

29. (Previously Presented) The method as recited in claim 1, wherein a Simple 
Network Management Protocol (SNMP) trap capability is utilized. 

30. (Previously Presented) The method as recited in claim 1 , wherein the intrusion 
detection services include scanning the network traffic information and detecting 
intrusions in the network based on the scanned network traffic information. 

3 1 . (Previously Presented) The method as recited in claim 3, wherein the network 
traffic information is collected from a plurality of zone controllers coupled to the 
host controllers. 
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32. (Previously Presented) The method as recited in claim 3 1 3 wherein the intrusion 
detection services are performed by the host controllers and the zone controllers. 

33. (Previously Presented) The method as recited in claim 31, wherein the host 
controllers and the zone controllers operate based on user-configurable business 
rules. 

34. (Previously Presented) The method as recited in claim 5> wherein a fee associated 
with the reporting is determined based on a number of agents, the host controllers, 
and zone controllers. 

35. (Previously Presented) The method as recited in claim 34, wherein the fee is 
reoccuiring. 
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